-
Notifications
You must be signed in to change notification settings - Fork 506
Description
Describe the bug
It seems I am not capturing any HTTP traffic when istio is enabled (default mTLS to permissive).
When I disable istio in the namespace, HTTP traffic is captured.
Provide more information
Running on Google Cloud GKE 1.29.6
Kubeshark v53.3.79 deployed through helm chart (most values kept to default).
Istio-proxy version is gcr.io/gke-release/asm/proxyv2:1.18.7-asm.26
To Reproduce
add istio-injection: enabled label to your ns, bounce pods => no HTTP traffic (except healthchecks which are non mTLS)
remove the label or set to disabled => HTTP traffic is captured normally.
Expected behavior
With istio enabled, I expected HTTP traffic to be captured in addition to TLS traffic.
Reading through the github issues here, it seems a bug similar to what I am seeing was fixed here:
https://github.com/kubeshark/kubeshark/releases/tag/v52.3.69, but I am still not seeing HTTP traffic with v.53.3.79
I must be doing something wrong! I would appreciate if anyone had suggestions to capture HTTP traffic once istio is enabled.